Aaffan.

Aaffan Khan Niazi

Security Analyst & CS Grad from LUMS | SOC Specialist | AI-Driven Threat Detection

Overview

Computer Science graduate from LUMS with a focus on cybersecurity and AI. Experienced in SOC operations, threat monitoring, and incident triage at Ebryx. Skilled in deploying custom SIGMA/YARA rules and conducting enterprise-level security audits. Passionate about building automated, AI-driven security frameworks.

Islamabad, Pakistan

Experience

Aug 2025 – Present

INTERNSHIP

Security Analyst Intern

Ebryx (Pvt.) Ltd.

Lahore (Hybrid)

Operated in SOC conducting real-time threat monitoring and incident triage; developed and deployed custom SIGMA/YARA detection rules integrated with ELK Stack and Wazuh, reducing manual alert review overhead. Led enterprise Cisco WLC wireless security audit using Nmap/NSE scripts; discovered 4 critical vulnerabilities including SWEET32, missing forward secrecy (no ECDHE/DHE), and deprecated TLS 1.0/1.1 configurations. Conducted wireless penetration testing with Aircrack-ng on Kali Linux; mapped deauthentication attack vectors across campus access points and recommended WPA3 + 802.11w migration as countermeasures.

•Operated in SOC conducting real-time threat monitoring and incident triage

•Developed and deployed custom SIGMA/YARA detection rules integrated with ELK Stack and Wazuh

•Led enterprise Cisco WLC wireless security audit using Nmap/NSE scripts

•Conducted wireless penetration testing with Aircrack-ng on Kali Linux

•Mapped deauthentication attack vectors across campus access points

Key Achievements

→Reduced manual alert review overhead through custom SIGMA/YARA rules

→Discovered 4 critical vulnerabilities including SWEET32, missing forward secrecy (no ECDHE/DHE), and deprecated TLS 1.0/1.1 configurations

→Recommended WPA3 + 802.11w migration as countermeasures for deauthentication attacks

ELK StackWazuhSIGMAYARACisco WLCNmapNSE ScriptsSWEET32TLS 1.0/1.1Aircrack-ngKali LinuxWPA3802.11w

Project Portfolio

ACADEMIC

Present

Enterprise Wireless Security Assessment

Independent Researcher

Identified critical cryptographic weaknesses in enterprise Cisco infrastructure: SWEET32 vulnerability, absent ECDHE/DHE cipher suites, and active deprecated TLS 1.0/1.1 endpoints.

Cisco InfrastructureSWEET32ECDHE/DHETLS 1.0/1.1

ACADEMIC

Present

Privacy-First WiFi Sensing System

Signal Processing Researcher

Deployed WiFi-DensePose framework for camera-free human presence/motion detection via RSSI fluctuation analysis and signal variance computation. Engineered real-time data pipeline with WebSocket streaming to Three.js dashboard; roadmap includes CSI integration for full skeletal pose estimation.

WiFi-DensePoseRSSIWebSocketThree.js

PERSONAL

Present

n8n Security Automation Platform

Developer

Self-hosted n8n automation platform via Docker; built Telegram OCR bot with REST API integrations for automated security alert forwarding and data extraction pipelines.

n8nDockerTelegram APIREST APIOCR

PERSONAL

Present

AI-Driven Access Anomaly Detection Framework

Senior Capstone Student

Integrated ELK Stack/Wazuh SIEM with custom ML models for real-time unauthorized access detection, behavioral anomaly detection, and automated mitigation. Built centralized SOC monitoring dashboard with real-time alert visualization and automated incident response playbook integration.

ELK StackWazuhMachine LearningSOC DashboardCisco Datasets

Education

Aug 2023 – May 2026

BSc (Hons.) Computer Science

Lahore University of Management Sciences (LUMS)Specialization in Computer Science

Thesis: AI-Driven Access Anomaly Detection Framework

Relevant Coursework

AlgorithmsDatabasesData StructuresOSNetwork Centric ComputingAI/MLData Science

Feb 2025 – Jun 2025

Semester Exchange

Middle East Technical University (METU), TurkeySpecialization in Business Administration

Aug 2021 – Aug 2023

High School Diploma

The City School, Capital Campus

Impact & Recognition

Professional Certifications

Ebryx

Advanced SOC Training Programme

CompTIA

CompTIA Networks+

arcX · 2024

Foundation Level Threat Intelligence Analyst

Expires Feb 2026

Patents & Publications

PUBLICATION

Security Research Publication

Published security research reaching 1,400+ impressions.

Skills & Interests

SIGMA Rules

TECHNICAL

Wazuh

TECHNICAL

ELK Stack

TECHNICAL

Kali Linux

TOOL

YARA Rules

TECHNICAL

MITRE ATT&CK

TECHNICAL

Nmap

TOOL

Elasticsearch

TOOL

Logstash

TOOL

Kibana

TOOL

Aircrack-ng

TOOL

Wireless PenTest

TECHNICAL

WPA2/WPA3

TECHNICAL

Python

TECHNICAL

Docker

TOOL

Cisco WLC

TECHNICAL

FastAPI

TECHNICAL

SQL/PL/SQL

TECHNICAL

Threat Hunting

TECHNICAL

Bash

TECHNICAL

Oracle Cloud

TECHNICAL

PCI-DSS/NIST Compliance

TECHNICAL

AWS

TECHNICAL

JavaScript

TECHNICAL

Splunk

TECHNICAL

Let's Connect

I'd love to hear from you. Feel free to reach out.

These unlock once you finish onboarding and publish your profile.

Talk to AI Aaffan

Online

I am an AI representation of Aaffan. Ask me anything about their experience, skills, or working style.